General

  • Target

    1376-69-0x000000000041F040-mapping.dmp

  • Size

    370KB

  • MD5

    2c54e60931fee45136fde922c778123a

  • SHA1

    f8d71a46e33a2231c33e973d480641861e961a83

  • SHA256

    f2c512f9f696110b024b599949ac2a14d19d5e620c64b50c8d8b1e47231cf706

  • SHA512

    581290f225eb45438ebf8a22c71a3455f49f85cefc7e26aea2fbb2063d3a4b6892b23e8515dd3b9d6e2e71755a3e76c6d592256a2b0bfc8244753f6ae4c5cdd8

  • SSDEEP

    6144:o9iJOoI5DxHCc49O7e7bjX9iJOoI5DxHCc49O7e7bjO:tJOb6XjAJOb6XjO

Score
10/10

Malware Config

Extracted

Family

formbook

Version

4.1

Campaign

t01w

Decoy

yeluzishiyanshi.com

thehardtech.xyz

arrowheadk8.site

zaulkunutila.xyz

lookastro.net

congregorecruitment.co.uk

darcyboo.uk

collettesbet.net

ltgpd.com

hiddenapphq.net

haxtrl.online

esenbook.com

jxzyyx.com

ulvabuyout.xyz

instashop.life

vazra.top

ewdvatcuce4.top

zhishi68.com

fabricsandfashion.com

hootcaster.com

Signatures

  • Formbook family
  • Formbook payload 1 IoCs

Files

  • 1376-69-0x000000000041F040-mapping.dmp